EUVD-2010-2469

Malware in sbrugna...

Sql injection

SQL injection vulnerability in merchantproductlist.php in JCE-Tech Shareasale Script SASS 1 allows remote attackers to execute arbitrary SQL commands via the mechantid parameter...

CVE-2010-2460

CVE-2010-2460 affects JCE-Tech Shareasale Script (SASS) 1, where the file merchant_product_list.php contains an SQL injection vulnerability exposed via the mechant_id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, enabling remote attackers to manipulate the dat...